Honeypot (hidden field + min fill time)

Generated from mcp/patterns.registry.json — do not edit by hand; change the registry and run bun run patterns:build.

Index card — the docs below are the canonical explanation; deep-tier pattern pages additionally carry invariants and emulation notes.

Category: Anti-Abuse · Tier: light · Risk: medium — abuse-prevention layer; bypass reduces spam defense

A no-interaction bot check combining a hidden form field bots tend to fill with a minimum elapsed-time threshold between render and submit.

When to use: Use on forms where adding a visible captcha would hurt conversion but basic bot filtering is still needed.

Docs

• docs/blueprint/abuse/honeypot.md (GitHub · GitLab)

Code

• src/lib/server/abuse/honeypot.ts (GitHub · GitLab)

Proof

• /showcases/abuse/honeypot

Machine-readable record: anti-abuse-honeypot in mcp/patterns.registry.json.